✕
Image
Currently viewing ATT&CK v19.2 which was live between April 28, 2026 and October 12, 2026. Learn more about the versioning system or see the live site.
ATT&CKcon 7.0 registration is open! Join us October 27-28, 2026 in McLean, VA or virtually. Register in person or register virtually. See the FAQ for hotel and venue details.
  1. Home
  2. Assets
  3. Virtual Private Network (VPN) Server

Virtual Private Network (VPN) Server

A VPN server is a device that is used to establish a secure network tunnel between itself and other remote VPN devices, including field VPNs. VPN servers can be used to establish a secure connection with a single remote device, or to securely bridge all traffic between two separate networks together by encapsulating all data between those networks. VPN servers typically support remote network services that are used by field VPNs to initiate the establishment of the secure VPN tunnel between the field device and server.

ID: A0011
ⓘ
Platforms: Embedded, Linux, Windows
Sectors: General
Version: 1.1
Created: 28 September 2023
Last Modified: 12 May 2026

Related Assets

Name Sectors Description
Virtual Private Network (VPN) terminator General

A VPN terminator is a device performs the role of either a VPN client or server to support the establishment of VPN connection. [1]
Field VPN General

Field VPN are typically deployed at remote outstations and are used to create secure connections to VPN servers within data/control center environments.

ICS Layer
download view Image

Techniques

Domain ID Name
ICS T0830 Adversary-in-the-Middle
ICS T1695 Block Communications
.001 Serial COM
.002 Ethernet
.003 Wi-Fi
ICS T0892 Change Credential
ICS T0885 Commonly Used Port
ICS T0884 Connection Proxy
ICS T0809 Data Destruction
ICS T0816 Device Restart/Shutdown
ICS T0819 Exploit Public-Facing Application
ICS T0820 Exploitation for Evasion
ICS T0890 Exploitation for Privilege Escalation
ICS T0866 Exploitation of Remote Services
ICS T0822 External Remote Services
ICS T0874 Hooking
ICS T0872 Indicator Removal on Host
ICS T1694 Insecure Credentials
.001 Default Credentials
ICS T0883 Internet Accessible Device
ICS T0867 Lateral Tool Transfer
ICS T1693 .001 Modify Firmware: System Firmware
ICS T0834 Native API
ICS T0840 Network Connection Enumeration
ICS T0842 Network Sniffing
ICS T0886 Remote Services
ICS T0846 Remote System Discovery
.001 Port Scan
.002 Broadcast Discovery
.003 Multicast Discovery
ICS T0888 Remote System Information Discovery
ICS T0847 Replication Through Removable Media
ICS T0851 Rootkit
ICS T0881 Service Stop
ICS T0869 Standard Application Layer Protocol
ICS T0862 Supply Chain Compromise
ICS T0859 Valid Accounts

References

  1. IEC 2019, February Security for industrial automation and control systems - Part 4-2: Technical security requirements for IACS components Retrieved. 2020/09/25